General

  • Target

    8c17a5b0b6e89d04fb97ce4ffa9760d9dc46d1451fb940d0a543c5b647918701.bin

  • Size

    4.6MB

  • MD5

    a7cad33f5043c05b023fc4441473e8f0

  • SHA1

    c340dbac8bf6be3f3e9c45bf8e4a3cd6df5178bc

  • SHA256

    8c17a5b0b6e89d04fb97ce4ffa9760d9dc46d1451fb940d0a543c5b647918701

  • SHA512

    df07f2816a1130625af95d8935e63c157a83e1bd29faa2cf2417cdd9a805d84a9f36044038ab3e9b37280d226c535d635ca440b6c6da43d6416d7c07533cf0ff

  • SSDEEP

    98304:2inpaUrsqIckQha/IDMyXfeMSpB11Lrh584F60SiXHOgsUN0:hnpVr7Ic18IDtXfeM2BzPh584F60PXub

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/yazmozaramekos

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 8c17a5b0b6e89d04fb97ce4ffa9760d9dc46d1451fb940d0a543c5b647918701.bin
    .apk android

    com.quinon.acadialite

    com.quinon.acadialite.lappers


  • up.apk
    .apk android

    com.inosculating.swithbert

    com.inosculating.swithbert.reverts


Android Permissions

8c17a5b0b6e89d04fb97ce4ffa9760d9dc46d1451fb940d0a543c5b647918701.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES